The most comprehensive Angular PDF viewer, powered by Mozilla PDF.js 6 — view, annotate, sign, fill forms, search, and read aloud from one component. 9M+ downloads, mobile-first, production-ready.
88%
Total Score
healthy
Healthy, with concentrated maintenance as the main caveat.
One contributor made 90% of the recent commits, creating a real concentration risk, although a second contributor remains active and the repository is organization-owned.
All six workflows were analyzed successfully, all 13 action references are pinned, and five workflows use read-only permissions. One workflow has top-level write permissions, while the sole cache-poisoning finding is low confidence and has no untrusted trigger or checkout sink, so this is only a minor hygiene concern.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2024-10243 ng2-pdfjs-viewer is vulnerable to Cross-site Scripting (XSS) in all versions. | 0.0.0 - * | High |
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.